MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-common | Aug 8, 2022 | May 25, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-configUpgrade mariadb-sphinx-engineUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-rocksdb-engineUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-s3-engineUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-connect-engineUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-libs | Sep 28, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-develUpgrade mariadb105-serverUpgrade mariadb105Upgrade mariadb105-server-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-test-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-connect-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-backupUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-testUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pamUpgrade mariadb105-sphinx-engine | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadbUpgrade mysql-selinuxUpgrade galeraUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb-gssapi-server | Aug 3, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Oracle_linux | — | Upgrade mariadb-testUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-develUpgrade mysql-selinuxUpgrade galera | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-test-debuginfoUpgrade mariadb-backup-debuginfoNo solution existsUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadbUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mysql-selinuxUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade galera-debugsource | Aug 3, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadbUpgrade mariadb-server-utilsUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-backupUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-embedded-debuginfo | Mar 12, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub